Directory traversal

Multiple directory traversal vulnerabilities in sflog! 0.96 allow remote attackers to read arbitrary files via a .. dot dot in the 1 permalink or 2 section parameter to index.php, possibly involving includes/entries.inc.php and other files included by index.php...

CVE-2008-0703

Multiple directory traversal vulnerabilities in sflog! 0.96 allow remote attackers to read arbitrary files via a .. dot dot in the 1 permalink or 2 section parameter to index.php, possibly involving includes/entries.inc.php and other files included by index.php...

CVE-2008-0721

The CVE-2008-0721 issue affects the Sermon (com_sermon) 0.2 component for Mambo, where an SQL injection is exploitable via the gid parameter in index.php. The vulnerability is described as allowing remote attackers to execute arbitrary SQL commands; CVSS v2 base score 7.5 (HIGH) with Network atta...

CVE-2008-0681

SQL injection vulnerability in index.php in PHPShop 0.8.1 allows remote attackers to execute arbitrary SQL commands via the productid parameter, as demonstrated by a shop/flypage action...

CVE-2008-0703

Multiple directory traversal vulnerabilities in sflog! 0.96 allow remote attackers to read arbitrary files via a .. dot dot in the 1 permalink or 2 section parameter to index.php, possibly involving includes/entries.inc.php and other files included by index.php...

CVE-2008-0695

Vulnerability (CVE-2008-0695) : SQL injection in BookmarkX script 2007, via index.php showtopic with the topicid parameter. Allows remote arbitrary SQL execution; CVSS v2 base score 7.5 ( HIGH ). Public reference: Exploit-DB item 5040. No explicit remediation/version details present in the provid...

csp-sql.txt

COUNTER STRİKE PORTALSKommentare zum Download script download=http://www.phpwelt.de/scripte/Sonstiges/?PHPSESSID=3cfc7efaa4b2a50e397b801526944fe6 AUTHOR : S@BUN HOME : http://www.hackturkiye.com/ MAİL : [email protected] DORK 1 : allinurl: id mode=details "index.php?page=downloads...

CVE-2008-0686

CVE-2008-0686 affects Joomla! via the NeoReferences (com_neoreferences) component versions 1.3.1 and 1.3.3. The root cause is a SQL injection in index.php triggered by the catid parameter, allowing remote attackers to execute arbitrary SQL commands. The vulnerability exposes a partial confidentia...

CVE-2008-0690

The CVE-2008-0690 vulnerability affects Joomla!'s mosDirectory (com_directory) 2.3.2. A SQL injection flaw exists in index.php via the catid parameter in a viewcat action, allowing remote attackers to execute arbitrary SQL commands. The connected sources corroborate that this is a SQL injection i...

Joomla <= v1.0.14-RC1(Index.php) Remote File Inclusion Exploit

============================================================================================== Joomla = v1.0.14-RC1Index.php Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Version : v2.3.1 &...

Joomla Component com_noticias 1.0 SQL Injection Vulnerability

No description provided by source. CoRPITX Turkey www.Hayalet-hack.com www.zone-turk.net/ joomla comnoticiasSQL Injection Vulnerability AUTHOR : xcorpitx HOME : www.Hayalet-hack.com / www.zone-turk.net/ WHEN YOU PUT THIS SQL CODE YOU LL SEE ADM脻N NAME,ADMIN HASH AND EMA脻L DorK : 'comnoticias'...

Joomla Component NeoGallery 1.1 SQL Injection Vulnerability

Exploit for unknown platform in category web applications =========================================================== Joomla Component NeoGallery 1.1 SQL Injection Vulnerability =========================================================== joomla SQL Injectioncomneogallery DORK 1 :...

joomla1014-rfi.txt

============================================================================================== Joomla = v1.0.14-RC1Index.php Remote File Inclusion Exploit =============================================================================================== Critical Level : Dangerous Version : v2.3.1 &...

Joomla! Component NeoGallery 1.1 - SQL Injection

joomla SQL Injectioncomneogallery AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : allinurl:"comneogallery" EXPLOIT :...

joomlacommon-sql.txt

Commonwealth Business Council SQL Injection AUTHOR : S@BUN HOME : http://www.hackturkiye.com DORK 1 : allinurl: "index.php?option=comdoc" DORK 2: "Commonwealth Business Council EXPLOIT :...

Mambo Component Sermon 0.2 (gid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ Mambo Component Sermon 0.2 gid SQL Injection Vulnerability ============================================================ DORKS 1 : allinurl:"comnacontent" DORK 2 :...

Mambo Component Sermon 0.2 - 'gid' SQL Injection

netadvantist@copyright 2006 SQL Injectioncomnaxxx AUTHOR : S@BUN HOME : http://www.hackturkiye.com DORKS 1 : allinurl:"comnacontent" DORK 2 : allinurl:"comnabible" DORKS 3 : allinurl:"comnaevents" DORKS 4 : allinurl:"comnacontent" DORKS 5 : allinurl:"comnafeedback" DORKS 6 : allinurl:"comnamydocs...

CVE-2008-0612

Directory traversal vulnerability in htdocs/install/index.php in XOOPS 2.0.18 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the lang parameter...

Sql injection

SQL injection vulnerability in index.php in All Club CMS ACCMS 0.0.1f and earlier allows remote attackers to execute arbitrary SQL commands via the name parameter...

CVE-2008-0603

SQL injection vulnerability in index.php in the amazOOP Awesom! comawesom 0.3.2component for Mambo and Joomla! allows remote attackers to execute arbitrary SQL commands via the listid parameter in a viewlist task...